At The Helpful Tipper, we value your privacy and are committed to being transparent about how we collect, use, and protect your personal information.
Below is detailed information about our general privacy practices and specifics related to our Google Docs add-on. Please choose the policy that applies to your interaction with our services to read in detail.
1. General Privacy Policy (Blog)
General Privacy Policy
This policy outlines how we collect, use, and protect personal information from visitors to our blog. It covers details on the data we gather through cookies, contact forms, and other user interactions on our site. It explains how we maintain the security and privacy of your information.
2. Duplicate Link Finder
Privacy Policy: Duplicate Link Finder
Last updated October 1, 2024
1. Introduction
Thank you for choosing Duplicate Link Finder. This privacy policy explains how we collect, use, and protect your information when you use our Google Docs add-on.
By using this add-on, you agree to the terms of this privacy policy. If you do not agree, please refrain from using the add-on.
2. Information We Access
When you use Duplicate Link Finder, we require access to your Google Docs for the following purposes:
Google Docs Full Access (https://www.googleapis.com/auth/documents): This permission allows us to read the full content of your Google Docs in order to identify and flag duplicate hyperlinks. However, we do not store, modify, or share any of your Google Docs content.
Google Docs UI Access (https://www.googleapis.com/auth/script.container.ui): We use this permission to add a sidebar to your Google Docs UI, where the results of duplicate link identification are displayed.
3. Data Collection and Use
- We do not collect, store, or share any personal information, document content, or any other data from your Google Docs.
- The add-on operates entirely within your Google account and processes the document content locally within the Google Docs environment.
- The sole purpose of accessing your document is to detect and flag duplicate links for your convenience.
4. Data Protection and Security
We take your privacy seriously and have implemented strict data protection measures, including:
- End-to-End Data Security: All document access and operations are performed locally within your Google Docs environment. No data is transferred outside of the Google infrastructure.
- Encryption: Any data transmission between your Google Docs and our add-on uses encrypted connections (SSL/TLS) to prevent unauthorized access.
- Data Minimization: We only access the minimum required data (duplicate links) for the functioning of the add-on, and we do not store, retain, or share this data in any form.
- No Persistent Data Storage: The add-on does not persist or log data. No residual data remains once the document is closed or the add-on is uninstalled.
- Access Controls: Only the Google account associated with the document and the add-on will access the processed data. No third-party or external systems have access.
5. Third-Party Access
No third parties have access to any data processed by this add-on. All document scanning and processing occur locally in your Google Docs environment, and no data is sent to external servers.
6. User Control and Uninstalling
You maintain full control over your data. You can uninstall the add-on at any time through the Google Docs interface, which will immediately revoke the add-on’s access to your documents.
To uninstall:
- Go to Google Docs.
- Select Extensions > Add-ons > Manage add-ons.
- Find Duplicate Link Finder and select Remove.
7. Changes to This Policy
We may update this privacy policy periodically to reflect changes to our practices or for other operational, legal, or regulatory reasons. You will be notified of any significant changes, and the date of the latest version will always be at the top of this page.
8. Contact Information
If you have any questions about this privacy policy or the add-on, you can contact us at:
Email: [email protected]
3. SplitFlow
Privacy Policy: SplitFlow
Last updated October 23, 2025
1. Introduction
Welcome to SplitFlow. This Privacy Policy explains how we collect, use, and protect your information when you use our application. This is a prototype application for demonstration purposes.
2. Information We Collect
Account Information: When you sign in with Google, we receive your name and email address to create and identify your account.
Expense Data: We collect information you provide about expenses, including descriptions, amounts, and participants.
Media for Parsing: If you use the photo or voice capture features, we temporarily process the images of receipts or voice recordings to extract expense details. This data is sent to Google’s Gemini API for analysis and is not stored permanently on our servers after processing.
3. How We Use Your Information
- To provide and maintain the core functionality of the app, such as creating events, tracking expenses, and calculating balances.
- To improve our services, including the accuracy of our AI-powered expense parsing features.
- To communicate with you for support purposes if you contact us.
4. Data Storage and Security
For this MVP (Minimum Viable Product), your user data and event information are stored locally on your device using your browser’s `localStorage`. This means your data does not leave your device except when interacting with third-party services as described below.
We take reasonable measures to protect your information, but no electronic storage is 100% secure.
5. Third-Party Services
We use Google’s Gemini API to process voice commands and receipt images. We only send the necessary media data for parsing. We do not send personal identification information along with these requests. Google’s use of this data is governed by its own privacy policy.
6. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page.
7. Contact Information
If you have any questions about this privacy policy or MVP, you can contact us at:
Email: [email protected]
4. Prompt Optimizer
Privacy Policy: Prompt Optimizer
Last updated November 2, 2025
This Privacy Policy describes how the “Prompt Optimizer” Chrome Extension (“the Extension”) handles your data. Your privacy and security are of the utmost importance to us.
1. Data Collection and Usage
The core functionality of the Extension is designed to operate without collecting or transmitting any personal information to our servers.
- API Keys: If you choose to use your own Google Gemini or OpenAI API key, your key is stored exclusively on your local computer using the chrome.storage API. Your API keys are never sent to our servers or any third party, other than directly to the respective AI provider (Google or OpenAI) from your browser to fulfill your prompt requests.
- Prompt Content: The prompts you write and the text you select are sent directly to the AI provider you have configured (Google or OpenAI). This data is not logged, stored, or viewed by us. Your interactions are subject to the privacy policies of the respective AI provider.
- Encryption: If you enable the optional encryption feature, your API keys are encrypted using the standard Web Crypto API (AES-256) with a passphrase you provide. This passphrase is also stored only for your current browser session using chrome.storage.session and is never transmitted anywhere.
2. Guest Mode
If you use “Guest Mode,” the following applies:
- We send your prompt and the selected optimization instruction to a secure backend function (Supabase Edge Function), which then forwards it to the Gemini API using our own API key.
- To prevent abuse, we associate a randomly generated, anonymous user ID (stored in your browser’s local storage) with your requests to enforce a daily usage quota.
- This anonymous ID is not linked to your identity, and we do not log the content of your prompts in Guest Mode.
3. Permissions Justification
The Extension requests the following permissions to function correctly:
- storage: Required to securely save your settings and API keys locally on your device.
- scripting & activeTab: Required to enable the in-page floating toolbar, read your selected text, and inject the optimized prompt back into the page at your command. The extension only runs on the active tab when you interact with it.
- host permission (<all_urls>): Required to provide the core “In-Page Floating Toolbar” feature, which allows the extension to detect when the user selects text inside an editable field (like a or input box) on any website visited, so it can display the prompt suggestion toolbar right where the user needs it. The extension only activates when the user interacts with it by selecting text. It does not read, store, or transmit any other page content or browsing history. User privacy is respected—the selected text is only ever sent to the configured AI provider (Google Gemini or OpenAI) when the user clicks a suggestion pill.
4. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
5. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: [email protected]
5. NoteApply AI
Privacy Policy: NoteApply AI
Last updated December 4, 2025
NoteApply AI (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the NoteApply AI Chrome Extension.
We operate under a “Local-First” philosophy, meaning we prioritize keeping your data on your device. We do not sell your personal data, nor do we use it for advertising purposes.
1. Information We Collect
A. User-Generated Content
We collect data that you explicitly capture or create while using the extension, including:
- Text Selections: Text you highlight on webpages.
- Notes & Annotations: Text comments you add to highlights.
- Page Content: The text of the webpages you analyze is temporarily processed to generate summaries or analyses.
- Audio Data: If you use the voice dictation feature, your voice input is processed by your browser’s native Speech-to-Text engine.
B. Account Information
If you choose to connect your Google Account for backup features, we access:
- Email Address & Profile Picture: Used solely to display your connection status within the Settings panel.
C. Technical Data
- URLs: The web address of the pages where you take notes (to link your notes back to the source).
2. How We Use Your Information
We use the collected information for the following specific purposes:
- Core Functionality: To save your highlights, generate summaries, and perform gap analyses on text you select.
- AI Processing:
- Local Processing (Default): If you use Ollama, your page content and notes are processed entirely on your local machine (localhost). No data leaves your device.
- Cloud Processing (Optional): If you opt in to use OpenAI or Google Gemini, your inputs (page text, prompts) are sent to their respective APIs solely to generate the response.
- Synchronization: To back up your notes to your personal Google Drive (Google Sheets) or export reports to Google Docs upon your request.
3. Data Storage and Retention
- Local Storage: By default, all notes, highlights, and settings are stored locally in your browser (chrome.storage.local). This data stays on your device until you uninstall the extension or clear the data via the Settings menu.
- Google Drive: If you enable backups, your data is stored in a specific Google Sheet or Google Doc within your own Google Drive account. We do not have access to your Drive files other than those created or opened by NoteApply AI.
4. Third-Party Services and Data Sharing
We do not share your data with third parties for marketing or advertising. Data is only shared with third-party processors if you explicitly configure the extension to do so:
- Google Gemini API: If you select Gemini as your provider, data is sent to Google’s servers for processing.
- OpenAI API: If you select OpenAI as your provider, data is sent to OpenAI’s servers for processing.
- Browser Speech Recognition: Voice dictation is processed by your browser’s built-in Web Speech API provider.
5. Google API Services User Data Policy
NoteApply AI’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We request the following specific permissions (scopes) to provide core functionality:
- https://www.googleapis.com/auth/drive.file:
- Purpose: To create and manage specific files for backing up your notes (e.g., the “NoteApply AI Backups” spreadsheet) and exporting research (Google Docs).
- Usage: We only access files that we have created or that you explicitly open with this extension. We do not have access to your wider Google Drive library or personal files created by other applications.
- https://www.googleapis.com/auth/spreadsheets:
- Purpose: To structure and write your notes into the backup spreadsheet.
- Usage: Used strictly to append new rows containing your highlights, summaries, and analysis to your designated backup sheet.
- https://www.googleapis.com/auth/userinfo.email:
- Purpose: To confirm authentication status within the Extension Settings.
- Usage: We display your email address in the “Settings” panel so you know which account is currently connected. This data is stored locally in your browser and is not sent to external servers.
We do not allow humans to read this data unless we have your affirmative agreement for specific messages. Doing so is necessary for security purposes, such as investigating abuse, to comply with applicable law, or for the app’s internal operations, and even then, only when the data have been aggregated and anonymized.
6. Your Controls and Choices
- AI Provider Selection: You can choose to use Local AI (Ollama) to ensure no text data leaves your network.
- Domain Privacy: You can configure “Blocklists” in Settings to prevent the extension from running AI analysis on specific websites.
- Data Deletion: You can permanently delete all locally stored data via the “Clear All Data” button in the Settings page.
- Disconnect Google: You can disconnect your Google Account at any time in Settings, which revokes our access token.
7. Security
We implement appropriate security measures to protect your data:
- Encryption: All communication with Cloud APIs (OpenAI, Gemini, Google Drive) occurs over HTTPS.
- Local Storage: Your API keys are stored in your browser’s local storage and are not accessible to web pages you visit.
8. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: [email protected]